RAM 6000 Technical Information PDF herunterladen (Seite 111)

Software Manual 111

Services Tab

3.5.8.2 SSL Server

The SSL Server menu item is used to configure the Red Lion router to issue SSL certificates to requesting SSL clients.

• Click on the SSL Server menu item and the following dialog window will appear:

Enable SSL: Select Yes to configure SSL client/server. Select No and click the Apply button to disable SSL.

Select Activity Log Level: This controls the logging level for SSL Connection activity. The recommended setting for a

production environment is Summary. The recommended setting for a test environment is Full.

Wait for Connection (sec.): Time (in seconds) allowed after sending SYN packets, to wait for SYN-ACK. The recom-

mended setting for this field is 20 seconds.

Idle Timeout (min.): Time (in minutes) allowed for no traffic over an SSL connection, before closing down the link. The

recommended setting is 720 minutes.

Select Certificate: A server certificate must be provided. This will be used to encrypt communication with all clients.

The certificates must be in PEM format, with an unencrypted key (not password protected when generated). Self

signed certificates are highly recommended. Use Admin->Certificate Manager to install/update certs.

Enable Advanced Setup: Select Yes to modify advanced SSL options.

Bind Interface for accepting SSL Connections: This will restrict the encrypted listening socket to allow connections

coming into the specified interface only. The recommended setting for this field is Any.

Bind Interface for outgoing TCP Connections: This will restrict the unencrypted socket to initiate connections out the

specified interface only. Specifying an interface here may conflict with policy routing, however it may be required in a

GRE/VPN or other tunneled environment. Please consult with a network architect for additional assistance. The rec-

ommended setting for this field is Any.

1 2 ... 106 107 108 109 110 111 112 113 114 115 116 ... 210 211

Keine Kommentare

RAM 6000 Technical Information Seite 111